huaweicloud-devkit 1.0.2-next.8 → 1.0.2

package/README.zh-CN.md

@@ -8,46 +8,32 @@
 
 帮助 AI 编码助手安全、准确地使用华为云——一站式集成云知识、CLI 工具和安全护栏。
 
-支持 OpenCode、Codex、码道（CodeArts Agent）、WorkBuddy、DeepSeek Harness（DSH）、OfficeAce。
+支持 OpenCode、码道（CodeArts Agent）、WorkBuddy、DeepSeek Harness（DSH）、OfficeAce、OpenClaw。
 
 ## 前置条件
 
-- Node.js >= 20
+- Node.js >= 22
 
 ## 快速开始
 
-### OpenCode
-
-```bash
-npx --yes huaweicloud-devkit install
-```
-
-自动安装 DevKit。安装后**重启会话**。
+> 省略 `--target` 时，安装器会自动检测机器上的 agent，检测到多个时**全部安装**。建议始终指定 `--target` 以明确安装目标。
 
-```bash
-npx --yes huaweicloud-devkit doctor   # 自检
-npx --yes huaweicloud-devkit status   # 查看状态
-npx --yes huaweicloud-devkit update   # 更新
-npx --yes huaweicloud-devkit uninstall # 卸载
-```
-
-### Codex
+### OpenCode
 
 ```bash
-npx --yes huaweicloud-devkit install --target codex
+npx --yes huaweicloud-devkit install --target opencode
 ```
 
-> 需要先安装 Codex CLI。
+安装后**重启会话**。
 
 ```bash
-npx --yes huaweicloud-devkit doctor                        # 自检
-npx --yes huaweicloud-devkit status --target codex
-npx --yes huaweicloud-devkit update --target codex         # 更新
-npx --yes huaweicloud-devkit uninstall --target codex
+npx --yes huaweicloud-devkit doctor --target opencode
+npx --yes huaweicloud-devkit status --target opencode
+npx --yes huaweicloud-devkit update --target opencode
+npx --yes huaweicloud-devkit uninstall --target opencode
+rm -rf ~/.npm/_npx/  # 仅 Linux/macOS；Windows 路径待确认
 ```
 
-> **Codex Desktop**（Windows）：将 `--target codex` 换成 `--target codex-desktop`，命令相同。
-
 ### CodeArts Agent（码道）
 
 ```bash
@@ -57,16 +43,13 @@ npx --yes huaweicloud-devkit install --target codearts
 安装后**重启会话**。
 
 ```bash
-npx --yes huaweicloud-devkit install-hcloud   # 安装 KooCLI
-npx --yes huaweicloud-devkit doctor           # 自检
+npx --yes huaweicloud-devkit doctor --target codearts
 npx --yes huaweicloud-devkit status --target codearts
 npx --yes huaweicloud-devkit update --target codearts
 npx --yes huaweicloud-devkit uninstall --target codearts
 ```
 
-> **沙箱模式**：码道默认沙箱模式会阻止 KooCLI 运行。`install-hcloud` 自动检测并给出指引——请在码道外终端安装使用 KooCLI，或在码道设置中关闭沙箱模式（设置 → 权限 → Bash 模式）。
->
-> **认证**：执行 `npx huaweicloud-devkit auth init`，统一配置 KooCLI、OBS 和沙箱接口所需的 AK/SK。
+> **沙箱模式**：码道默认沙箱模式会阻止 KooCLI 运行。`install-hcloud` 自动检测并给出指引——请在码道外终端安装使用 KooCLI，或在码道设置中关闭沙箱模式（设置 → 对话流 → 智能体 终端命令运行模式 → 自动运行）。
 
 ### WorkBuddy
 
@@ -77,34 +60,28 @@ npx --yes huaweicloud-devkit install --target workbuddy
 安装后**重启会话**。
 
 ```bash
-npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit doctor --target workbuddy
 npx --yes huaweicloud-devkit status --target workbuddy
-npx --yes huaweicloud-devkit update --target workbuddy   # 更新
+npx --yes huaweicloud-devkit update --target workbuddy
 npx --yes huaweicloud-devkit uninstall --target workbuddy
 ```
 
-> **更新机制**：`update` 按 agent 增量更新，只刷新必要文件、不动你的配置文件。`update --target all` 可一次更新所有已安装的 agent。
-
 ### DeepSeek Harness（DSH）
 
 ```bash
 npx --yes huaweicloud-devkit install --target dsh
 ```
 
-安装器会把 Skills 写入 `$DSH_HOME/skills`，把 MCP Server 和安全策略写入
-`$DSH_HOME/huaweicloud-plugins`，并自动维护
-`$DSH_HOME/profiles/web/cordis.patch.yml`。安装后**重启 DSH 会话**。
+安装后**重启 DSH 会话**。
 
 ```bash
-npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit doctor --target dsh
 npx --yes huaweicloud-devkit status --target dsh
 npx --yes huaweicloud-devkit update --target dsh
 npx --yes huaweicloud-devkit uninstall --target dsh
 ```
 
-> DSH V1 通过 `@deepseek-ai/dsh-mcp-client` 复用现有 MCP Server。
-> 如果安装器提示 DSH MCP 客户端未检测到，请按提示执行
-> `npx @deepseek-ai/dsh plugin --profile web add @deepseek-ai/dsh-mcp-client`。
+> DSH V1 通过 `@deepseek-ai/dsh-mcp-client` 复用现有 MCP Server。如果安装器提示客户端未检测到，请执行：`npx @deepseek-ai/dsh plugin --profile web add @deepseek-ai/dsh-mcp-client`。
 
 ### OfficeAce
 
@@ -115,35 +92,78 @@ npx --yes huaweicloud-devkit install --target officeace
 安装后**重启 OfficeAce**。
 
 ```bash
-npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit doctor --target officeace
 npx --yes huaweicloud-devkit status --target officeace
 npx --yes huaweicloud-devkit update --target officeace
 npx --yes huaweicloud-devkit uninstall --target officeace
 ```
 
+### OpenClaw
+
+```bash
+# 推荐方式 (ClawHub)
+openclaw plugins install clawhub:huaweicloud-devkit
+openclaw plugins uninstall huaweicloud-devkit
+openclaw plugins update huaweicloud-devkit
+```
+
+安装后**重启 OpenClaw**。如提示安全风险确认，加 `--acknowledge-clawhub-risk`。
+
+```bash
+# 或通过 npx
+npx --yes huaweicloud-devkit install --target openclaw
+npx --yes huaweicloud-devkit status --target openclaw
+npx --yes huaweicloud-devkit update --target openclaw
+npx --yes huaweicloud-devkit uninstall --target openclaw
+rm -rf ~/.npm/_npx/  # 仅 Linux/macOS；Windows 路径待确认
+```
+
 ### 其他 Agent
 
-支持 MCP 协议的 Agent，手动配置：
+任何支持 MCP 协议的 Agent，直接使用标准 MCP 配置：
 
 ```json
 {
-  "mcp": {
+  "mcpServers": {
     "huaweicloud-devkit": {
-      "type": "local",
-      "command": ["node", "<路径>/plugins/huaweicloud-core/src/mcp-server.mjs"],
-      "enabled": true
+      "command": "npx",
+      "args": ["-y", "-p", "huaweicloud-devkit", "huaweicloud-devkit-mcp"]
     }
   }
 }
 ```
 
-然后安装：
+无需预安装 — `npx` 自动处理一切。
+
+> 项目级 AK/SK 可通过 MCP 配置的 `env` 字段设置 `HW_ACCESS_KEY`/`HW_SECRET_KEY`。
+
+### 安装 KooCLI
+
+```bash
+npx --yes huaweicloud-devkit install-hcloud
+```
+
+### 配置凭据
+
+```bash
+npx --yes huaweicloud-devkit auth init
+```
+
+一步同步 AK/SK 到 KooCLI、OBS 和沙箱接口。
+
+### 安装所有 Agent
+
+```bash
+npx --yes huaweicloud-devkit install --target all
+```
+
+### 更新所有 Agent
 
 ```bash
-npx --yes huaweicloud-devkit install
+npx --yes huaweicloud-devkit update --target all
 ```
 
-> **前置条件：** Node.js >= 20。执行 `npx huaweicloud-devkit auth init` 完成统一认证。
+`update` 是增量更新——只刷新已安装的文件，不动配置文件。
 
 ## 功能特性
 
@@ -151,6 +171,7 @@ npx --yes huaweicloud-devkit install
 - **安全优先执行** — 所有写操作需用户明确批准；凭证和密钥自动脱敏
 - **执行前风险检查** — 公网暴露、凭证泄露、破坏性操作在执行前即被拦截
 - **区域感知** — 自动发现可用区域，创建资源前检查服务可用性
+- **沙箱（DevStation）** — 临时云端运行环境，部署 Web 应用并即刻获得公网预览地址
 
 ## 支持的服务
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.0.2-next.8",
+  "version": "1.0.2",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "type": "module",
   "files": [
@@ -10,11 +10,12 @@
     "integrations/opencode"
   ],
   "bin": {
-    "huaweicloud-devkit": "./bin/setup.cjs"
+    "huaweicloud-devkit": "./bin/setup.cjs",
+    "huaweicloud-devkit-mcp": "./plugins/huaweicloud-core/src/mcp-server.mjs"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/huaweicloud/HuaweiCloud-Devkit.git"
+    "url": "https://github.com/huaweicloud/huaweicloud-devkit.git"
   },
   "scripts": {
     "test": "node --test",
@@ -27,7 +28,10 @@
     "pack:verify": "node ./scripts/pack-verify.mjs",
     "postinstall": "node -e \"console.log('\\nHuaweiCloud DevKit installed. Run: npx huaweicloud-devkit install\\n')\""
   },
-  "dependencies": {},
+  "dependencies": {
+    "better-sqlite3": "^13.0.3",
+    "undici": "^8.10.0"
+  },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "eslint": "^10.8.1",
@@ -54,6 +58,6 @@
   ],
   "license": "Apache-2.0",
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   }
 }

package/plugins/huaweicloud-core/.claude-plugin/plugin.json

@@ -17,13 +17,13 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.0.2-next.8",
+  "version": "1.0.2",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"
   },
   "hooks": "./hooks/",
-  "name": "huaweicloud-core",
+  "name": "huaweicloud-devkit",
   "homepage": "https://github.com/huaweicloud/HuaweiCloud-Devkit",
   "repository": "https://github.com/huaweicloud/HuaweiCloud-Devkit",
   "license": "Apache-2.0",

package/plugins/huaweicloud-core/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
-  "name": "huaweicloud-core",
-  "version": "1.0.2-next.8",
+  "name": "huaweicloud-devkit",
+  "version": "1.0.2",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json

@@ -17,13 +17,13 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.0.2-next.8",
+  "version": "1.0.2",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"
   },
   "hooks": "./hooks/",
-  "name": "huaweicloud-core",
+  "name": "huaweicloud-devkit",
   "homepage": "https://github.com/huaweicloud/HuaweiCloud-Devkit",
   "repository": "https://github.com/huaweicloud/HuaweiCloud-Devkit",
   "license": "Apache-2.0",

package/plugins/huaweicloud-core/.hermes-plugin/plugin.json

@@ -0,0 +1,30 @@
+{
+  "name": "huaweicloud-devkit",
+  "version": "1.0.2",
+  "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
+  "author": {
+    "name": "HuaweiCloud Mate",
+    "url": "https://github.com/huaweicloud"
+  },
+  "homepage": "https://github.com/huaweicloud/HuaweiCloud-Devkit",
+  "repository": "https://github.com/huaweicloud/HuaweiCloud-Devkit",
+  "license": "Apache-2.0",
+  "keywords": ["huaweicloud", "huawei-cloud", "koocli", "hcloud", "agent", "mcp", "api", "sdk", "skills"],
+  "skills": "./skills/",
+  "mcpServers": "./.mcp.json",
+  "interface": {
+    "displayName": "HuaweiCloud Devkit",
+    "shortDescription": "HuaweiCloud Devkit - Huawei Cloud guidance, CLI/API/SDK routing, MCP tools, and safety for coding agents.",
+    "longDescription": "HuaweiCloud Devkit helps coding agents choose and use Huawei Cloud Skills, KooCLI, APIs, SDKs, and MCP tools with less context, safer command execution, and more accurate cloud implementation decisions.",
+    "developerName": "HuaweiCloud Mate",
+    "category": "Cloud",
+    "capabilities": ["Read", "Interactive"],
+    "websiteURL": "https://github.com/huaweicloud/HuaweiCloud-Devkit",
+    "brandColor": "#C7000B",
+    "defaultPrompt": [
+      "Help me choose the right Huawei Cloud capability.",
+      "Check my Huawei Cloud CLI setup safely.",
+      "Plan this Huawei Cloud API or SDK task."
+    ]
+  }
+}

package/plugins/huaweicloud-core/.mcp.json

@@ -5,8 +5,7 @@
       "args": ["./src/mcp-server.mjs"],
       "cwd": ".",
       "env": {
-        "HUAWEICLOUD_AGENT_TOOLKIT_MODE": "local",
-        "HDKITSERVICE_ENDPOINT": ""
+        "HUAWEICLOUD_AGENT_TOOLKIT_MODE": "local"
       }
     }
   }

package/plugins/huaweicloud-core/.workbuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
-  "name": "huaweicloud-core",
-  "version": "1.0.2-next.8",
+  "name": "huaweicloud-devkit",
+  "version": "1.0.2",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",
@@ -12,7 +12,6 @@
   "keywords": ["huaweicloud", "huawei-cloud", "koocli", "hcloud", "agent", "mcp", "api", "sdk", "skills"],
   "skills": "./skills/",
   "mcpServers": "./.mcp.json",
-  "hooks": "./hooks/",
   "interface": {
     "displayName": "HuaweiCloud Devkit",
     "shortDescription": "HuaweiCloud Devkit - Huawei Cloud guidance, CLI/API/SDK routing, MCP tools, and safety for coding agents.",

package/plugins/huaweicloud-core/hooks/huaweicloud-safety.py

@@ -1,136 +1,159 @@
-#!/usr/bin/env python3
-"""PreToolUse hook for Huawei Cloud agent safety.
-
-Blocks the highest-risk leakage paths before an agent tool runs:
-- reading local Huawei Cloud credential files
-- dumping cloud credential environment variables
-- directly retrieving cloud secret values
-- running unapproved write operations through hcloud
-
-The MCP server carries the same policy in Node for platforms that do not support
-plugin hooks.
-"""
-
-import json
-import re
-import sys
-from pathlib import Path
-
-DENY_PREFIX = "Huawei Cloud safety hook blocked this action: "
-RULES_PATH = Path(__file__).resolve().parents[1] / "safety" / "rules" / "cloud-risk-rules.json"
-
-CONFIG_FILE_RE = re.compile(r"(\.hcloud|\.huaweicloud|hcloud[/\\](config|credentials)|huaweicloud[/\\](config|credentials))", re.I)
-ENV_DUMP_RE = re.compile(r"(env|printenv|Get-ChildItem\s+Env:|gci\s+Env:|dir\s+Env:).*(HUAWEICLOUD|HWC_|HCLOUD|OS_)", re.I)
-SECRET_READ_RE = re.compile(r"(ShowSecretVersion|GetSecretValue|secret_string|secret_binary)", re.I)
-HCLOUD_RE = re.compile(r"(^|\s)hcloud(\.exe)?\s+", re.I)
-WRITE_OPERATION_RE = re.compile(
-    r"\b(BatchCreate|BatchDelete|Create|Delete|Update|Modify|Resize|Reboot|Stop|Start|Restart|Authorize|Revoke|Add|Remove|Associate|Disassociate|Attach|Detach|Enable|Disable)\w*",
-    re.I,
-)
-READ_OPERATION_RE = re.compile(r"\b(List|Show|Get|Describe|NovaList|NovaShow)\w*", re.I)
-
-
-def deny(reason):
-    json.dump(
-        {
-            "hookSpecificOutput": {
-                "hookEventName": "PreToolUse",
-                "permissionDecision": "deny",
-                "permissionDecisionReason": DENY_PREFIX + reason,
-            }
-        },
-        sys.stdout,
-    )
-    sys.exit(0)
-
-
-def allow():
-    sys.exit(0)
-
-
-def command_text(tool_input):
-    if isinstance(tool_input, str):
-        return tool_input
-    if isinstance(tool_input, dict):
-        values = []
-        for key in ("command", "cmd", "script", "args", "arguments"):
-            value = tool_input.get(key)
-            if isinstance(value, list):
-                values.append(" ".join(str(item) for item in value))
-            elif value is not None:
-                values.append(str(value))
-        if values:
-            return "\n".join(values)
-        return json.dumps(tool_input)
-    return json.dumps(tool_input)
-
-
-def load_cloud_risk_rules():
-    try:
-        with RULES_PATH.open("r", encoding="utf-8") as file_obj:
-            catalog = json.load(file_obj)
-        return catalog.get("rules", [])
-    except Exception:
-        return []
-
-
-def condition_matches(condition, text):
-    return re.search(condition.get("regex", r"a^"), text, re.I | re.M | re.S) is not None
-
-
-def rule_matches(rule, text):
-    match = rule.get("match") or {}
-    all_conditions = match.get("all")
-    any_conditions = match.get("any")
-    none_conditions = match.get("none")
-
-    if isinstance(all_conditions, list):
-        for condition in all_conditions:
-            if not condition_matches(condition, text):
-                return False
-    if isinstance(any_conditions, list):
-        if not any(condition_matches(condition, text) for condition in any_conditions):
-            return False
-    if isinstance(none_conditions, list):
-        if any(condition_matches(condition, text) for condition in none_conditions):
-            return False
-    return isinstance(all_conditions, list) or isinstance(any_conditions, list)
-
-
-def first_denied_command_rule(text):
-    for rule in load_cloud_risk_rules():
-        if "command" not in rule.get("stages", []):
-            continue
-        if rule.get("severity") != "deny":
-            continue
-        if rule_matches(rule, text):
-            return rule
-    return None
-
-
-def main():
-    try:
-        data = json.load(sys.stdin)
-    except Exception:
-        allow()
-
-    tool_name = data.get("tool_name", "")
-    text = command_text(data.get("tool_input", {}))
-
-    if CONFIG_FILE_RE.search(text):
-        deny("reading Huawei Cloud credential/profile files can expose AK/SK or tokens. Use redacted toolkit tools.")
-    if ENV_DUMP_RE.search(text):
-        deny("dumping cloud credential environment variables is not allowed.")
-    if SECRET_READ_RE.search(text):
-        deny("direct secret value retrieval would put plaintext secrets into the agent context.")
-    denied_rule = first_denied_command_rule(text)
-    if denied_rule:
-        deny(f"{denied_rule.get('message')} Remediation: {denied_rule.get('remediation')}")
-    if tool_name == "Bash" and HCLOUD_RE.search(text) and WRITE_OPERATION_RE.search(text) and not READ_OPERATION_RE.search(text):
-        deny("unapproved Huawei Cloud write operations must be planned first and explicitly approved by the user.")
-
-    allow()
-
-
-if __name__ == "__main__":
-    main()
+#!/usr/bin/env python3
+"""PreToolUse hook for Huawei Cloud agent safety.
+
+Blocks the highest-risk leakage paths before an agent tool runs:
+- reading local Huawei Cloud credential files
+- dumping cloud credential environment variables
+- directly retrieving cloud secret values
+- running unapproved write operations through hcloud
+
+The MCP server carries the same policy in Node for platforms that do not support
+plugin hooks.
+"""
+
+import json
+import re
+import sys
+from pathlib import Path
+
+DENY_PREFIX = "Huawei Cloud safety hook blocked this action: "
+RULES_PATH = Path(__file__).resolve().parents[1] / "safety" / "rules" / "cloud-risk-rules.json"
+POLICY_PATH = Path(__file__).resolve().parents[1] / "safety" / "policy.json"
+
+CONFIG_FILE_RE = None
+SECRET_READ_RE = None
+WRITE_OPERATION_RE = None
+
+
+def load_policy():
+    global CONFIG_FILE_RE, SECRET_READ_RE, WRITE_OPERATION_RE
+    try:
+        with POLICY_PATH.open("r", encoding="utf-8") as file_obj:
+            policy = json.load(file_obj)
+        cred_patterns = policy.get("credentialFilePatterns", [])
+        if cred_patterns:
+            CONFIG_FILE_RE = re.compile("|".join(cred_patterns), re.I)
+        blocked_secrets = policy.get("blockedSecretOperations", [])
+        if blocked_secrets:
+            SECRET_READ_RE = re.compile("|".join(re.escape(op) for op in blocked_secrets), re.I)
+        write_prefixes = policy.get("writeOperationPrefixes", [])
+        if write_prefixes:
+            WRITE_OPERATION_RE = re.compile(r"\b(" + "|".join(write_prefixes) + r")\w*", re.I)
+    except Exception:
+        pass
+
+
+load_policy()
+
+ENV_DUMP_RE = re.compile(
+    r"(env|printenv|Get-ChildItem\s+Env:|gci\s+Env:|dir\s+Env:).*(HUAWEICLOUD|HWC_|HCLOUD|OS_)", re.I,
+)
+HCLOUD_RE = re.compile(r"(^|\s)hcloud(\.exe)?\s+", re.I)
+READ_OPERATION_RE = re.compile(r"\b(List|Show|Get|Describe|NovaList|NovaShow)\w*", re.I)
+READ_OPERATION_RE = re.compile(r"\b(List|Show|Get|Describe|NovaList|NovaShow)\w*", re.I)
+
+
+def deny(reason):
+    json.dump(
+        {
+            "hookSpecificOutput": {
+                "hookEventName": "PreToolUse",
+                "permissionDecision": "deny",
+                "permissionDecisionReason": DENY_PREFIX + reason,
+            }
+        },
+        sys.stdout,
+    )
+    sys.exit(0)
+
+
+def allow():
+    sys.exit(0)
+
+
+def command_text(tool_input):
+    if isinstance(tool_input, str):
+        return tool_input
+    if isinstance(tool_input, dict):
+        values = []
+        for key in ("command", "cmd", "script", "args", "arguments"):
+            value = tool_input.get(key)
+            if isinstance(value, list):
+                values.append(" ".join(str(item) for item in value))
+            elif value is not None:
+                values.append(str(value))
+        if values:
+            return "\n".join(values)
+        return json.dumps(tool_input)
+    return json.dumps(tool_input)
+
+
+def load_cloud_risk_rules():
+    try:
+        with RULES_PATH.open("r", encoding="utf-8") as file_obj:
+            catalog = json.load(file_obj)
+        return catalog.get("rules", [])
+    except Exception:
+        return []
+
+
+def condition_matches(condition, text):
+    return re.search(condition.get("regex", r"a^"), text, re.I | re.M | re.S) is not None
+
+
+def rule_matches(rule, text):
+    match = rule.get("match") or {}
+    all_conditions = match.get("all")
+    any_conditions = match.get("any")
+    none_conditions = match.get("none")
+
+    if isinstance(all_conditions, list):
+        for condition in all_conditions:
+            if not condition_matches(condition, text):
+                return False
+    if isinstance(any_conditions, list):
+        if not any(condition_matches(condition, text) for condition in any_conditions):
+            return False
+    if isinstance(none_conditions, list):
+        if any(condition_matches(condition, text) for condition in none_conditions):
+            return False
+    return isinstance(all_conditions, list) or isinstance(any_conditions, list)
+
+
+def first_denied_command_rule(text):
+    for rule in load_cloud_risk_rules():
+        if "command" not in rule.get("stages", []):
+            continue
+        if rule.get("severity") != "deny":
+            continue
+        if rule_matches(rule, text):
+            return rule
+    return None
+
+
+def main():
+    try:
+        data = json.load(sys.stdin)
+    except Exception:
+        allow()
+
+    tool_name = data.get("tool_name", "")
+    text = command_text(data.get("tool_input", {}))
+
+    if CONFIG_FILE_RE and CONFIG_FILE_RE.search(text):
+        deny("reading Huawei Cloud credential/profile files can expose AK/SK or tokens. Use redacted toolkit tools.")
+    if ENV_DUMP_RE.search(text):
+        deny("dumping cloud credential environment variables is not allowed.")
+    if SECRET_READ_RE and SECRET_READ_RE.search(text):
+        deny("direct secret value retrieval would put plaintext secrets into the agent context.")
+    denied_rule = first_denied_command_rule(text)
+    if denied_rule:
+        deny(f"{denied_rule.get('message')} Remediation: {denied_rule.get('remediation')}")
+    if tool_name == "Bash" and HCLOUD_RE.search(text) and WRITE_OPERATION_RE.search(text) and not READ_OPERATION_RE.search(text):
+        deny("unapproved Huawei Cloud write operations must be planned first and explicitly approved by the user.")
+
+    allow()
+
+
+if __name__ == "__main__":
+    main()